Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

ignite realtime openfire vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2007-2975
The admin console in Ignite Realtime Openfire 3.3.0 and previous versions (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote malicious users to gain privileges and execute arbitrary code by accessing functionality that is exposed throug...
Ignite Realtime Openfire 3.2.1Ignite Realtime Openfire 3.1.1Ignite Realtime Openfire 3.0.1Ignite Realtime OpenfireIgnite Realtime Openfire 3.2.4Ignite Realtime Openfire 3.2.3Ignite Realtime Openfire 3.2.2Ignite Realtime Openfire 3.0.0Ignite Realtime Openfire 2.6.2Ignite Realtime Openfire 2.6.1Ignite Realtime Openfire 2.6.0Ignite Realtime Openfire 3.2.0Ignite Realtime Openfire 3.1.0
383
VMScore
CVE-2006-7233
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.6.0, and possibly other versions prior to 3.5.3, allows remote malicious users to inject arbitrary web script or HTML via the url parameter.
Ignite Realtime Openfire 2.6.0Ignite Realtime Openfire
356
VMScore
CVE-2008-1728
ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.
Ignite Realtime Openfire 3.4.5
383
VMScore
CVE-2005-4876
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.2.2, and possibly other versions prior to 2.3.0 Beta 2, allows remote malicious users to inject arbitrary web script or HTML via the username parameter, a...
Ignite Realtime Openfire 2.2.2
445
VMScore
CVE-2009-0496
Multiple cross-site scripting (XSS) vulnerabilities in Ignite Realtime Openfire 3.6.2 allow remote malicious users to inject arbitrary web script or HTML via the (1) log parameter to (a) logviewer.jsp and (b) log.jsp; (2) search parameter to (c) group-summary.jsp; (3) username pa...
Ignite Realtime Openfire 3.6.2
383
VMScore
CVE-2005-4877
Cross-site scripting (XSS) vulnerability in the login form (login.jsp) of the admin console in Openfire (formerly Wildfire) 2.3.0 Beta 2 allows remote malicious users to inject arbitrary web script or HTML via Javascript events in the username parameter, a different vulnerability...
Ignite Realtime Openfire 2.3.0
383
VMScore
CVE-2018-11688
Ignite Realtime Openfire prior to 3.9.2 is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A remote attacker could exploit this vulnerability via a crafted URL to execute script in a victim's Web browser within the security context o...
Igniterealtime Openfire 3.7.1
405
VMScore
CVE-2009-1595
The jabber:iq:auth implementation in IQAuthHandler.java in Ignite Realtime Openfire prior to 3.6.4 allows remote authenticated users to change the passwords of arbitrary accounts via a modified username element in a passwd_change action.
Igniterealtime Openfire 3.0.1Igniterealtime Openfire 3.1.0Igniterealtime Openfire 3.3.0Igniterealtime Openfire 3.3.2Igniterealtime Openfire 3.5.1Igniterealtime Openfire 3.5.2Igniterealtime Openfire 2.6.2Igniterealtime Openfire 3.0.0Igniterealtime Openfire 3.2.3Igniterealtime Openfire 3.2.4Igniterealtime Openfire 3.4.4Igniterealtime Openfire 3.4.5Igniterealtime Openfire 3.5.0Igniterealtime Openfire 3.4.2Igniterealtime OpenfireIgniterealtime Openfire 2.6.0Igniterealtime Openfire 2.6.1Igniterealtime Openfire 3.2.1Igniterealtime Openfire 3.2.2Igniterealtime Openfire 3.4.1Igniterealtime Openfire 3.4.3Igniterealtime Openfire 3.6.2
655
VMScore
CVE-2015-7707
Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin parameter to user-edit-form.jsp.
Igniterealtime Openfire 3.10.2
383
VMScore
CVE-2019-15488
Ignite Realtime Openfire prior to 4.4.1 has reflected XSS via an LDAP setup test.
Igniterealtime Openfire
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook